Governance & Regulation

A regulated, public-interest infrastructure provider.

VDCN is designed to operate as a licensed, regulated entity with transparent price control, clear obligations and strong oversight. The goal is to ensure the network serves the public interest first, while giving certainty to all users of the system.

Regulatory framework

Licence and oversight.

Dedicated licence

VDCN is envisaged as operating under a dedicated Vehicle Data Communications Licence (final name to be defined), setting out its duties, permitted activities and obligations to public bodies and users.

Independent regulation

An independent regulator, working with transport and treasury departments, would provide oversight on service levels, security, data use, charges and change programmes.

Service obligations

The licence would define minimum standards for availability, resilience, interoperability and non-discrimination between users and stakeholders.

Change governance

Structured processes for introducing major changes – such as new tariffs, data fields or services – with consultation, impact assessment and regulatory approval where needed.

Charges & price control

Funding the network fairly.

VDCN is infrastructure. Its revenues and costs should be governed through clear, transparent mechanisms that balance investment needs with affordability and value for money.

  • Cost-recovery model with regulated returns, not unconstrained profit.
  • Charges levied on defined customer groups, such as public bodies and authorised users.
  • Consultations and regulatory sign-off for any change in the charging structure.
  • Regular reporting on costs, efficiency and performance against targets.

The principle is simple: VDCN should be sustainable and investable, but not exploitative. Its governance should support the long-term stability the UK needs for vehicle data and road-usage charging infrastructure.

Codes & policies

Transparency and accountability.

Over time, VDCN would maintain and publish a suite of codes and policies that set out how it operates and how stakeholders can engage with the network.

Technical & connection codes

  • Code of Connection for OEMs and data providers.
  • Technical specifications, security requirements and test regimes.
  • Versioning policies and change notification processes.

Security & data protection

  • Data Protection and Privacy Policy.
  • Security and Incident Management Policy.
  • Data retention and anonymisation standards.

Reporting

  • Annual regulatory report summarising performance and investment.
  • Availability and incident statistics.
  • Stakeholder engagement and consultation outcomes.

Stakeholder engagement

  • Formal mechanisms for feedback from government, industry and civil society.
  • Structured consultations for major programmes and policy-linked changes.